Kundo

Usage of Microsoft 365 for outbound email in Kundo Mail

Updated

This guide describes how Microsoft 365 can be configured to allow for usage of Exchange and SMTP Auth to deliver outbound email from Kundo Mail: An alternative to the usage of Whitelabel, where Kundo handles mail delivery on behalf of your domain by adding DNS records (MX, SPF and DKIM). This method is not supported by Microsoft 365 for shared accounts but requires an Active user with an email address to be used in Kundo Mail. The guide includes instructions for activation of SMTP Auth as well as instructions for generating an App password (by first requiring and enabling MFA) for the account to be used by Kundo Mail.


Activate SMTP Auth for the account

  1. Log in on Microsoft 365 Admin Center
  2. Find the account you will be using for Kundo Mail under Users and Active users
  3. Select the account you will be using for Kundo Mail
  4. In the menu to the right: click on Email and select Manage email apps under the Email apps header


  5. Select Authenticated SMTP


  6. Click Save changes at the bottom of the page


If Security Defaults are enabled: Allow SMTP Auth for the account

Security Defaults is a selection of security policies Microsoft have introduced to allow for an easy setup of security policies. This instruction is only required if your tenant has Security Defaults enabled. To verify this, go to Azure Portal AD and select Manage security defaults at the bottom of the page. To allow SMTP Auth with Security Defaults enabled it is required to use Powershell. The following commands connects to Exchange Online and creates a policy whitelisting SMTP Auth for the account to be used with Kundo Mail:

Install-Module -Name ExchangeOnlineManagement Connect-ExchangeOnline Set-CASMailbox -Identity “kontots@mail.address“ -SmtpClientAuthenticationDisabled $False

Activate MFA (Multi-Factor Authentication) for the inbox

Activation of MFA is a requirement from Microsoft to generate App Passwords. If your organization already have MFA enforced (for all users or the selected user) go to the next step: Generate an App Password. This section describes how MFA is enforced and activated for a single account. More information on configuration of MFA can be found here: Set up your Microsoft 365 sign-in for multi-factor authentication

  1. Log in on Microsoft 365 Admin Center
  2. Go to Users and Active users
  3. Click on Multi-factor authentication
  4. Select the account to be used for Kundo Mail and select Enable and then Enforce in the menu to the right

  5. Go to the settings page for account authentication and log in with the account to be used with Kundo Mail: Security-info
  6. Select Add method


  7. Select Authentication App and follow the instructions
  8. At the end of the process, an App password is created for you automatically: You can use this App password and by doing so you can skip the next set of instructions. Contact support@kundo.se and inform that the account setup is completed and communicate the App Password in a way of your choice to Kundo Support.


Creating an App Password

Kundo mail uses a generated App Password, a kind of token, to authenticate by the usage of the protocol SMTP Auth. To be able to generate an App Password for an account in Microsoft 365 it is required that MFA is both activated and enforced for the account. More information on App Passwords can be found here: Manage app passwords for two-step verification

  1. Go to the settings page for account authentication and log in with the account to be used with Kundo Mail: Security-info
  2. Select Add Method


  3. Select App Password and click on Add. If App Password is not selectable in the drop down: Check that MFA is both activated and enforced for the account, see the preceding instructions for details. If MFA was activated during the session: try logging out from the account and in again.
  4. Give your App Password a name of choice, e.g. "Kundo Mail"
  5. Save the generated password so that you can send it to Kundo's Support.
  6. Contact support@kundo.se and inform that the account setup is completed and communicate the App Password in a way of your choice to Kundo Support.
Guide tagged with: mail smtp